*nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to-destination 192.168.0.2 -A POSTROUTING -o eth0 -j MASQUERADE COMMIT